{"id":157098,"date":"2026-02-05T17:11:56","date_gmt":"2026-02-05T15:11:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-razvivaet-otkrytuyu-sistemu-sandbox-izolyaczii-litebox"},"modified":"2026-02-05T17:11:56","modified_gmt":"2026-02-05T15:11:56","slug":"microsoft-razvivaet-otkrytuyu-sistemu-sandbox-izolyaczii-litebox","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/microsoft-razvivaet-otkrytuyu-sistemu-sandbox-izolyaczii-litebox","title":{"rendered":"Microsoft dezvolt\u0103 un sistem deschis de izolare sandbox, Litebox","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

James Morris, mentenor al subsistemului de securitate a nucleului Linux \u0219i lider al echipei \u201eLinux Emerging Technologies\u201d de la Microsoft, a prezentat proiectul Litebox, care este pozi\u021bionat ca un sistem de operare axat pe securitate sub forma unei biblioteci (Library OS). Litebox poate fi utilizat \u00een aplica\u021bii sau nuclee ca un strat suplimentar de izolare, bloc\u00e2nd accesul la func\u021bionalitatea excesiv\u0103 a nucleelor sau API-urilor pentru a reduce suprafa\u021ba atacurilor. Codul proiectului este scris \u00een limbajul Rust \u0219i este deschis sub licen\u021ba MIT. <\/p>\n

Ideea \u201eLibrary OS\u201d este c\u0103 serviciile sistemului de operare sunt integrate direct \u00een aplica\u021bie, \u00een loc de a apela la nucleul extern al sistemului de operare prin intermediul apelurilor de sistem. \u00cen contextul Litebox, aplica\u021biilor li se ata\u0219eaz\u0103 un strat izolator care furnizeaz\u0103 o platform\u0103 minim\u0103, traductoare pentru cererile c\u0103tre un API extern complet func\u021bional. Interfe\u021bele externe asem\u0103n\u0103toare pot include nucleul Linux, medii izolate protejate OP-TEE (Open Portable Trusted Execution Environment), medii Webassembly sau biblioteca standard RustStd.

\"Microsoft<\/center> <\/p>\n

Platforma minim\u0103 generat\u0103 prin Litebox este aplicabil\u0103 pentru rularea aplica\u021biilor Linux, Windows \u0219i FreeBSD, nuclee Linux \u00eencorporate \u0219i LVBS (Linux Virtualization Based Security). Printre posibilele domenii de aplicare ale Litebox se num\u0103r\u0103 asigurarea rul\u0103rii programelor Linux nemodificate \u00een Windows, izolarea execu\u021biei aplica\u021biilor Linux pe sisteme cu nucleu Linux, rularea programelor pe AMD SEV SNP pentru criptarea memoriei, executarea programelor OP-TEE \u00een Linux \u0219i izolarea utiliz\u00e2nd conceptul LVBS. <\/p>\n

Proiectul LVBS, ale c\u0103rui reprezentan\u021bi particip\u0103 la dezvoltarea Litebox, dezvolt\u0103 metode pentru a proteja componentele nucleului Linux, utiliz\u00e2nd capabilit\u0103\u021bile hipervizorilor \u0219i virtualiz\u0103rii hardware. De exemplu, prin intermediul hipervizorului, pot fi izolate opera\u021biuni de autentificare a modulelor, verificare \u0219i gestionare a accesului la parole, chei, structuri de nucleu \u0219i alte resurse critice. \u00cen cazul exploat\u0103rii unei vulnerabilit\u0103\u021bi \u0219i compromiterii nucleului, atacatorul nu va putea accesa astfel de resurse, deoarece gestionarii acestora sunt executa\u021bi \u00een afara nivelului curent de privilegii. Litebox este considerat \u00een contextul proiectului LVBS ca un \u201enucleu sigur\u201d, protej\u00e2nd nucleul normal al sistemului gazd\u0103 prin intermediul virtualiz\u0103rii hardware.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u0436\u0435\u0439\u043c\u0441 \u041c\u043e\u0440\u0440\u0438\u0441 (James Morris), \u043c\u044d\u0439\u043d\u0442\u0435\u043d\u0435\u0440 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 Linux, \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u043a\u043e\u043c\u0430\u043d\u0434\u0443 «Linux Emerging Technologies», \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Litebox, \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u043a\u0430\u043a \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0432 \u0444\u043e\u0440\u043c\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 (Library OS). Litebox \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u0445 \u0438\u043b\u0438 \u044f\u0434\u0440\u0430\u0445 \u043a\u0430\u043a \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u043b\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438, \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u0437\u043b\u0438\u0448\u043d\u0435\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u044f\u0434\u0435\u0440 \u0438\u043b\u0438 API \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":157099,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-157098","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft dezvolt\u0103 un sistem open-source de izolare sandbox Litebox | ProHoster","description":"James Morris, \u00eentre\u021bin\u0103torul subsistemului de securitate al nucleului Linux, care conduce echipa \"Linux Emerging Technologies\" la Microsoft, a prezentat proiectul Litebox, pozi\u021bionat ca.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/microsoft-razvivaet-otkrytuyu-sistemu-sandbox-izolyaczii-litebox","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 sandbox-\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 Litebox | ProHoster","og:description":"\u0414\u0436\u0435\u0439\u043c\u0441 \u041c\u043e\u0440\u0440\u0438\u0441 (James Morris), \u043c\u044d\u0439\u043d\u0442\u0435\u043d\u0435\u0440 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 Linux, \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u043a\u043e\u043c\u0430\u043d\u0434\u0443 "Linux Emerging Technologies", \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Litebox, \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u043a\u0430\u043a.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/microsoft-razvivaet-otkrytuyu-sistemu-sandbox-izolyaczii-litebox","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-05T15:11:56+00:00","article:modified_time":"2026-02-05T15:11:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"157098","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-05 15:12:56","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-05 15:11:57","updated":"2026-02-05 15:12:56","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/157098","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=157098"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/157098\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/157099"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=157098"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=157098"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=157098"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}